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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time maybe available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )I3 Responsive to communication(s) filed on 09 May 2001 . 
2a)D This action is FINAL. 2b)M This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) E3 Claim(s) 1-27 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) I3 Claim(s) 1-27 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(aMd) or(f). 
a)D AH b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . This Office Action is the answer to the communication filed on May 9, 2001 , which 
paper has been placed of record in the file. 

2. Claims 1-27 are pending in this application. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-27 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Trusted Computing Platform Alliance (TCPA), TCPA Design Philosophies and 
Concepts, Version 1.0. 

Regarding to claims 1-2, TCPA discloses a method and a computer program 
product adaptable for storage on a computer readable medium, comprising the steps of 
(see the entire document, pages 1-30): 

a non-migratable key, a first certificate by a Trusted Platform Module 
(TPM) identity associated with a computer system used by the customer, and a second 
certificate acquired by the computer system from a Certification Authority (CA); 

creating a public/private key pair and a third certificate in response to the 
receiving step; and 

sending the public/private key pair and the third certificate to the customer over 
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the network. 

TCPA does not disclose receiving from a customer over a network an application 
for a credit card authorization and the customer is capable of using the public/private 
key pair and the third certificate to make purchases over the network. However, 
receiving from a customer over a network an application for a credit card authorization 
and the customer is capable of using the public/private key pair and the third certificate 
to make purchases over the network are well known in the art. For example, the 
conventional electronic commerce allows the user purchases products over the Internet 
using a credit card, the user submits purchase request include credit card information, 
the credit card information is then transmitted to the credit card company for verifying 
and authorizing the purchase request. Therefore, it would have been obvious to one 
with ordinary skill in the art at the time the invention was made to apply the method of 
TCPA above for the purpose improving the security in purchasing products using credit 
card over the Internet. 

Regarding to claims 3-5, TCPA further discloses wherein the TPM identity is a 
public/private key pair created as a result of a command by the customer input into the 
computer system, wherein the second certificate is created by the Certification Authority 
in response to receiving a third certificate signed by a manufacturer of the TPM and a 
public key of the TPM identity, wherein the third certificate is associated with an 
endorsement key of the TPM (see the entire document, pages 1-30). 
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Regarding to claim 6, TCPA does not disclose wherein the network is the Internet. 
However, it is well known in the art that the customer can purchase products using 
credit card over the Internet (see details explanation in claims 1-2 above). 

Claims 7-24 contain similar limitations found in claims 1-6 above, therefore, are 
rejected by the same rationale. 

Regarding to claim 25. TCPA discloses a system comprising (see the entire 
document, pages 1-30): 
a server; 

a customer computer including a TPM; 

a network linked to the server and the customer computer; 

first software stored in memory in the customer computer for requesting the TPM 
to create a TPM identity; 

second software stored in memory in the customer computer for obtaining a first 
certificate over the network from a CA; 

third software stored in memory in the customer computer for creating a 
non-migratable key; 

sixth software stored in memory in the customer computer for sending to the 
server the TPM identity, the first certificate, and the non-migratable key; 

the server creating a public/private key pair and a second certificate; and 
the server sending the public/private key pair and the second certificate over the 
network to the customer computer. 
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TCPA does not disclose a server supporting a web site of a credit card company; 
fourth software stored in memory in the customer computer for browsing the web 
site of the credit card company over the network; fifth software stored in memory in the 
customer computer for sending an application for a credit card authorization to the web 
site of the credit card company over the network. However, such features are well 
known in the art. For example, the conventional electronic commerce allows the user 
purchases products over the Internet using a credit card, the user having a computer 
system storing browser software, e.g. Netscape, Internet Explorer, can submits 
purchase request include credit card information, the credit card information is then 
transmitted to the credit card company having a web site for verifying and authorizing 
the purchase request. Therefore, it would have been obvious to one with ordinary skill in 
the art at the time the invention was made to apply the method of TCPA above for the 
purpose improving the security in purchasing products using credit card over the 
Internet. 

Claims 26-27 contain similar limitations found in claim 25 above, therefore, are 
rejected by the same rationale. 

Conclusion 

5. Claims 1-27 are rejected. 

6. The prior arts made of record and not relied upon is considered pertinent to 
applicant's disclosure: 
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Davis et al. (US 6,389,537) disclose a platform and method for assuring integrity 
of trusted agent communications. 

Wheeler et al. (US 6,820,202) disclose account authority digital signature (AADS 
system. 

7. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to examiner Nga B. Nguyen whose telephone number is 
(571) 272-6796. The examiner can normally be reached on Monday-Thursday from 
9:00AM-6:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Hyung S. Sough can be reached on (571) 272-6799. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the Group receptionist whose telephone number is 
(571)272-3600. 

8. Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
C/o Technology Center 3600 
Washington, DC 20231 

Or faxed to: 

(571) 273-8300 (for formal communication intended for entry), 

or 

(571) 273-0325 (for informal or draft communication, please label 
"PROPOSED" or "DRAFT"). 
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Hand-delivered responses should be brought to Knox building, 501 Dulany 
Street, Alexandria, VA, First Floor (Receptionist). 



Nga B. Nguyen 




